Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/43640?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/43640?format=api", "vulnerability_id": "VCID-6v43-drd7-ufd7", "summary": "Moodle allows bypass of intended access restrictions\nmod/chat/chat_ajax.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 does not properly check for the mod/chat:chat capability during chat sessions, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by remaining in a chat session after an intra-session capability removal by an administrator.", "aliases": [ { "alias": "CVE-2014-0122" }, { "alias": "GHSA-f9m9-494r-w36p" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/62043?format=api", "purl": "pkg:composer/moodle/moodle@2.4.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qpu2-8paz-7ydv" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.4.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/62044?format=api", "purl": "pkg:composer/moodle/moodle@2.5.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qpu2-8paz-7ydv" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.5.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/62045?format=api", "purl": "pkg:composer/moodle/moodle@2.6.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qpu2-8paz-7ydv" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.6.2" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/62041?format=api", "purl": "pkg:composer/moodle/moodle@2.5.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ehh-qz6c-ykhp" }, { "vulnerability": "VCID-1whm-dsv7-t7gm" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-4v57-bu85-syhr" }, { "vulnerability": "VCID-4xqt-yugc-qufr" }, { "vulnerability": "VCID-5ru2-1n1f-afa4" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-6v43-drd7-ufd7" }, { "vulnerability": "VCID-7g7m-bu5q-gbcx" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-88pw-zwqn-cqfd" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-cvqm-kjhx-q7ej" }, { "vulnerability": "VCID-czph-uxwr-5uge" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-ea5s-xphb-6ub7" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-gdz8-d8j3-nqdh" }, { "vulnerability": "VCID-h8xn-n98n-qqdv" }, { "vulnerability": "VCID-j3t3-svwb-p7bn" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-q3wv-9hj6-vbgt" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qpu2-8paz-7ydv" }, { "vulnerability": "VCID-qxyw-7hnt-hqd6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-r88h-mteg-yka9" }, { "vulnerability": "VCID-rdfn-52p2-afa7" }, { "vulnerability": "VCID-s5cy-eva4-wbaf" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-ucg8-htfc-2bhn" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vrfy-36yc-muhr" }, { "vulnerability": "VCID-vs2j-b4qg-nbgu" }, { "vulnerability": "VCID-vwyj-z4gf-8fg5" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.5.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/62042?format=api", "purl": "pkg:composer/moodle/moodle@2.6.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1ehh-qz6c-ykhp" }, { "vulnerability": "VCID-1rar-m2g3-27ag" }, { "vulnerability": "VCID-1whm-dsv7-t7gm" }, { "vulnerability": "VCID-29yj-e9bd-queq" }, { "vulnerability": "VCID-2s6b-tp6p-gue1" }, { "vulnerability": "VCID-37pj-u3gh-n7fd" }, { "vulnerability": "VCID-3xwm-hqap-8bct" }, { "vulnerability": "VCID-4v57-bu85-syhr" }, { "vulnerability": "VCID-4xqt-yugc-qufr" }, { "vulnerability": "VCID-5c29-qn3p-3yde" }, { "vulnerability": "VCID-5ru2-1n1f-afa4" }, { "vulnerability": "VCID-65y9-9ur2-pugc" }, { "vulnerability": "VCID-6v43-drd7-ufd7" }, { "vulnerability": "VCID-7g7m-bu5q-gbcx" }, { "vulnerability": "VCID-7x8g-tdd5-kqbs" }, { "vulnerability": "VCID-83kb-4mk9-t7ge" }, { "vulnerability": "VCID-88pw-zwqn-cqfd" }, { "vulnerability": "VCID-8q4n-d565-kfbn" }, { "vulnerability": "VCID-a6pb-47tu-afcg" }, { "vulnerability": "VCID-ajkr-fxa1-mkhk" }, { "vulnerability": "VCID-an53-nu91-k3d7" }, { "vulnerability": "VCID-bfmx-cwap-8yhp" }, { "vulnerability": "VCID-bjnq-q2nd-1khp" }, { "vulnerability": "VCID-cvqm-kjhx-q7ej" }, { "vulnerability": "VCID-czph-uxwr-5uge" }, { "vulnerability": "VCID-duna-st9c-mqbk" }, { "vulnerability": "VCID-ea5s-xphb-6ub7" }, { "vulnerability": "VCID-eaqp-7abt-6kg9" }, { "vulnerability": "VCID-eu27-a3px-87ed" }, { "vulnerability": "VCID-fs9k-21es-rygd" }, { "vulnerability": "VCID-fsex-f512-pudv" }, { "vulnerability": "VCID-fumj-9pun-zfc5" }, { "vulnerability": "VCID-gdz8-d8j3-nqdh" }, { "vulnerability": "VCID-h8xn-n98n-qqdv" }, { "vulnerability": "VCID-hbky-xx53-vkct" }, { "vulnerability": "VCID-hck4-emsr-q7dc" }, { "vulnerability": "VCID-j3t3-svwb-p7bn" }, { "vulnerability": "VCID-jcq6-btgz-fkf6" }, { "vulnerability": "VCID-k1bh-ymgt-e7cd" }, { "vulnerability": "VCID-k6pw-51st-b3d2" }, { "vulnerability": "VCID-k73h-z6j8-gkgz" }, { "vulnerability": "VCID-krn6-pwk5-ake2" }, { "vulnerability": "VCID-kzwd-2e6n-fkbm" }, { "vulnerability": "VCID-m3np-aebb-8qaa" }, { "vulnerability": "VCID-m4zv-e3dn-budf" }, { "vulnerability": "VCID-mkfz-e1ft-2bcw" }, { "vulnerability": "VCID-nntc-dsz1-e3fp" }, { "vulnerability": "VCID-q3wv-9hj6-vbgt" }, { "vulnerability": "VCID-qhv1-wgpm-7fh6" }, { "vulnerability": "VCID-qpu2-8paz-7ydv" }, { "vulnerability": "VCID-qxyw-7hnt-hqd6" }, { "vulnerability": "VCID-r6kn-b963-eqge" }, { "vulnerability": "VCID-r88h-mteg-yka9" }, { "vulnerability": "VCID-rdfn-52p2-afa7" }, { "vulnerability": "VCID-s5cy-eva4-wbaf" }, { "vulnerability": "VCID-s6uu-335k-yfbc" }, { "vulnerability": "VCID-ucg8-htfc-2bhn" }, { "vulnerability": "VCID-uptz-tj66-7yfk" }, { "vulnerability": "VCID-uvgt-7m5a-xkdc" }, { "vulnerability": "VCID-v4qm-48kk-pfaz" }, { "vulnerability": "VCID-v7zm-cw8w-6yf8" }, { "vulnerability": "VCID-vb67-yux5-ayhf" }, { "vulnerability": "VCID-vda3-4fgr-gfbw" }, { "vulnerability": "VCID-vfp6-4h8n-bkax" }, { "vulnerability": "VCID-vrfy-36yc-muhr" }, { "vulnerability": "VCID-vs2j-b4qg-nbgu" }, { "vulnerability": "VCID-vwyj-z4gf-8fg5" }, { "vulnerability": "VCID-w9ca-exua-g7ar" }, { "vulnerability": "VCID-x7rg-rsb5-pya7" }, { "vulnerability": "VCID-xmm4-zw49-3feh" }, { "vulnerability": "VCID-xnmk-jah2-ufce" }, { "vulnerability": "VCID-y8up-cqtu-jkdw" }, { "vulnerability": "VCID-yghg-775s-vber" }, { "vulnerability": "VCID-zjrq-np3y-hua5" }, { "vulnerability": "VCID-zwkk-zazw-6fgg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.6.0" } ], "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-44082", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-44082" }, { "reference_url": "http://openwall.com/lists/oss-security/2014/03/17/1", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://openwall.com/lists/oss-security/2014/03/17/1" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0122", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00171", "scoring_system": "epss", "scoring_elements": "0.38101", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0122" }, { "reference_url": "https://github.com/moodle/moodle", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle" }, { "reference_url": "https://github.com/moodle/moodle/commit/3d7810ab3d67a423a760ba89ae75de81d940b236", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/3d7810ab3d67a423a760ba89ae75de81d940b236" }, { "reference_url": "https://github.com/moodle/moodle/commit/4d4867503c2467cb04660d9cb314d22f56004054", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/4d4867503c2467cb04660d9cb314d22f56004054" }, { "reference_url": "https://github.com/moodle/moodle/commit/5c45ea0c6bf2fdf4dddfaef9fc5ff12e6b426a3f", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/5c45ea0c6bf2fdf4dddfaef9fc5ff12e6b426a3f" }, { "reference_url": "https://github.com/moodle/moodle/commit/7748e17207b1a28118d9dc622878da22f956d3fe", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/moodle/moodle/commit/7748e17207b1a28118d9dc622878da22f956d3fe" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=256418", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://moodle.org/mod/forum/discuss.php?d=256418" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0122", "reference_id": "CVE-2014-0122", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0122" }, { "reference_url": "https://github.com/advisories/GHSA-f9m9-494r-w36p", "reference_id": "GHSA-f9m9-494r-w36p", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-f9m9-494r-w36p" } ], "weaknesses": [ { "cwe_id": 1035, "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017." }, { "cwe_id": 264, "name": "Permissions, Privileges, and Access Controls", "description": "Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control." }, { "cwe_id": 937, "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013." } ], "exploits": [], "severity_range_score": "4.0 - 6.9", "exploitability": "0.5", "weighted_severity": "6.2", "risk_score": 3.1, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-6v43-drd7-ufd7" }